CVE-2015-1279

CVE-2015-1279 describes an integer overflow vulnerability in the PDFium library's CJBig2_Image::expand function, affecting Google Chrome versions prior to 44.0.2403.89, as well as various Linux distributions like Debian, openSUSE, and Red Hat. This flaw allows remote attackers to trigger a denial of service via a heap-based buffer overflow, or potentially achieve other unspecified impacts, by manipulating large height and stride values in a crafted file. With a CVSS score of 7.5, it is considered highly severe due to its network-based attack vector, low attack complexity, and potential for partial impact on confidentiality, integrity, and availability. While there is no evidence of active exploitation (KEV: No) and no public exploit code (Metasploit, Nuclei, ExploitDB: None), the vulnerability has garnered some community discussion and media coverage, indicating awareness within the cybersecurity community.